Encrypted CPU card reader

Abstract

The utility model relates to an encryption CPU card reader, which comprises a control processing unit and a structural shell, the control processing unit is a core processing center of the encryption CPU card reader, completes input and output control, card reading and verification operation of the card reader, and has the functions of record management, authority management, alarm, data encryption and the like, the control processing unit comprises an MCU module, a signal input module, an anti-disassembly module, a Wiegand output module, an acoustic lamp control module, a PSAM card read-write module and a radio frequency circuit module. And the structural shell is an installation platform of the control processing unit, has dustproof, shockproof and waterproof performances and the like so as to adapt to use under various environmental conditions, and meanwhile, facilitates the overall installation of the card reader under various installation environments. The encrypted CPU card reader disclosed by the utility model is a card reading device applied to an access control system and an attendance system, and is used for reading the information of the CPU card encrypted by an algorithm, encrypting and decrypting by adopting the algorithm, and ensuring the safety of the information of the CPU card.

Description

Technical Field

[0001] The utility model relates to the technical field of identity recognition, in particular to an encryption CPU card reader suitable for access control systems and attendance systems. Background Art

[0002] As people's security awareness grows, the demand for access control systems is also increasing. Whether it's businesses, institutions, residences, or public places, access control systems are increasingly demanding higher security and convenience. Currently, cryptographic algorithms such as RSA and AES are widely used in access control systems on the market. However, to improve the controllability of information security, the access control industry currently requires CPU cards that support different algorithms. Summary of the Invention

[0003] In order to solve the above problems, the purpose of this utility model is to provide a card reader device that supports reading encrypted CPU cards with different algorithms (supporting multiple algorithms including commercial cryptographic algorithms compiled by the State Cryptography Administration). It has the function of preventing the card reader itself and the data of the encrypted CPU card from being eavesdropped or tampered with during the identity identification process, which can improve the security and efficiency of access control management and protect the privacy and property safety of users.

[0004] The utility model provides an encrypted CPU card reader, which comprises:

[0005] The control processing unit is the core processing center of the encrypted CPU card reader, which completes the input and output control, card reading and verification operations of the card reader, and has functions such as record management, authority management, alarm and data encryption;

[0006] The structural housing is the mounting platform for the control and processing unit to adapt to various environmental conditions and facilitate the overall installation of the card reader in various installation environments;

[0007] The LED indicator is used to visually display the card reader's operating status. It uses different colors and flashing patterns to indicate different states. The buzzer emits different prompts depending on the card reader's status: a long beep if the card reader is successfully configured; two short beeps if the card reader is not configured within 30 seconds and exits; a long beep if the card reader firmware integrity check fails; and four short beeps if the password entered twice is inconsistent with the password manager status.

[0008] Preferably, the LED indicator display mode can be specifically set to: red light on when powered on, yellow light always on for self-test, yellow light flashing quickly when password input is required, red light flashing once per second when prompting to swipe the configuration card, and yellow light on once when the card is successfully swiped; as for the sound setting of the buzzer, there is one long beep and two short beeps. Any of the long and four beeps corresponding to the different states can also be interchanged in order, for example, when the card reader is successfully configured, two short beeps, long beeps, or four short beeps can be heard; when the card reader is not configured within 30 seconds and exits, one long beep, long beep, or four short beeps can be heard; when the card reader firmware integrity check fails, one long beep, four short beeps, or two short beeps can be heard; when the password is entered inconsistently for more than three times in the password supervisor state, one long beep, long beeps, or two short beeps can be heard.

[0009] Preferably, the control processing unit includes an MCU module, a signal input module, an anti-tampering module, a Wiegand output module, a sound and light control module, a PSAM card reading and writing module, and a radio frequency circuit module:

[0010] The MCU module controls the entire operation logic of the card reader, and its internal Flash stores program code and configuration information;

[0011] The signal input module mainly includes Wiegand format input and keyboard data input;

[0012] The anti-tamper module uses a photosensor to output an anti-tamper signal when the card reader password module is removed;

[0013] The Wiegand output module sends card data after the card reader successfully reads the card;

[0014] The sound and light control module is used for input and output control of sound and light signals such as red light, green light, and buzzer;

[0015] Described PSAM card reading and writing module, it is used for connecting MCU module and PSAM card, carries out data communication, completes card reading process;

[0016] The radio frequency circuit module radiates radio frequency outwards to power the CPU card, sends data through a carrier wave and receives data returned by the radio frequency card to complete the card reading process.

[0017] In the encrypted CPU card reader of the present invention, the CPU card has a built-in commercial cryptographic algorithm compiled by the State Cryptography Administration.

[0018] The radio frequency is preferably a 13.56M radio frequency, and the carrier is a 13.56M carrier.

[0019] Preferably, the structural shell includes a shell and a cover plate. The shell is used to install the control processing unit and can be fixed on the corresponding installation environment. The shell can be made of PC+ABS to make the card reader more solid, durable, anti-aging and have a better feel.

[0020] The cover plate is used for installing the keyboard and is connected and assembled with the shell so that the encryption CPU card reader is an integral whole.

[0021] Preferably, the card reader is provided with a vertical LED indicator light and orderly arranged dots on both sides, which not only enhance the aesthetics and practicality of the card reader but also provide users with a better experience.

[0022] Preferably, the MCU module is used to install the firmware program of the encrypted CPU card reader and has card reading data storage and key management functions. A preferred specific workflow of the MCU module is:

[0023] The encrypted CPU card reader searches for the card, and after finding the CPU card, selects the DF file directory to be read;

[0024] The MCU module obtains a random number RND1 from the PSAM card through the PSAM card reading module, sends RND1 to the CPU card for encryption to obtain data RND1A, and simultaneously sends RND1 to the PSAM card for encryption to obtain RND1B, and then compares RND1A and RND1B. If they are equal, the external authentication is passed;

[0025] The MCU module obtains a random number RND2 from the CPU card through the RF circuit module, sends RND2 to the PSAM card for encryption, and sends the encryption result to the CPU card for internal authentication; after the internal authentication is completed, the user data in the DF file directory is read. If the user data is stored in an encrypted manner, the read user data needs to be sent to the PSAM card for decryption.

[0026] In a preferred embodiment, the MCU module in the encrypted CPU card reader of the present invention is used to install the firmware program of the national secret encrypted CPU card reader and has card reading data storage and key management functions. The specific algorithm-based encryption and decryption steps are as follows:

[0027] Select application: (1) the encrypted CPU card reader performs a power-on reset on the PSAM card; (2) the PSAM card returns a reset response; (3) the encrypted CPU card reader sends an instruction to select the access control application in the PSAM card; (4) the PSAM card returns whether the selected application is successful; (5) the encrypted CPU card reader resets the user card; (6) the user card returns a reset response; (7) the encrypted CPU card reader sends an instruction to select the access control application in the user card; (8) the user card returns whether the selected application is successful;

[0028] External authentication: (9) The encrypted CPU card reader obtains a random number from the user card; (10) The user card returns the random number RND1, and the user card system encrypts RND1 to obtain RND1B; (11) The encrypted CPU card reader sends an encryption calculation initialization instruction to the PSAM card; (12) The PSAM card returns whether the encryption initialization is successful; (13) The encrypted CPU card reader sends the random number RND1 to the PSAM card for encryption; (14) The PSAM card returns the encryption result RND1A of RND1; (15) The encrypted CPU card reader sends RND1A to the user card for authentication; (16) The user card compares RND1A with the self-encrypted RND1B and returns the comparison result;

[0029] Internal authentication: (17) The encrypted CPU card reader obtains a random number from the PSAM card; (18) The PSAM card returns the random number RND2; (19) The encrypted CPU card reader sends an internal authentication instruction to the user card, which includes the random number RND2; (20) The user card returns the encryption result RND2B of RND2; (21) The encrypted CPU card reader sends an internal authentication instruction to the PSAM card, which includes RND2; (22) The PSAM card returns the encryption result RND2A of RND2; (23) The encrypted CPU card reader compares RND2A and RND2B. If they are equal, the internal authentication is successful.

[0030] Read the content of the user card: (24) The encrypted CPU card reader sends an instruction to the user card to read the data in the user information file; (25) The user card returns the read data DAT; at this time (26) if the encrypted CPU card reader determines that DAT is ciphertext, it decrypts it; (27) The encrypted CPU card reader sends an encryption calculation initialization instruction to the PSAM card; (28) The PSAM card returns whether the initialization is successful; (29) The encrypted CPU card reader sends the user data DAT to the PSAM card for decryption; (30) The PSAM card returns the decrypted user data; (31) The encrypted CPU card reader sends the user data to the access control controller.

[0031] The beneficial effects of the utility model are as follows: the encrypted CPU card reader of the utility model is a card reading device used in access control systems and attendance systems, which is used to read the information of the algorithm-encrypted CPU card, and adopts the algorithm to encrypt and decrypt to ensure the security of the CPU card information; the utility model supports the reading of CPU cards, and the reliability, security and effectiveness of its design ensure that the data will not be eavesdropped or tampered with during the identity recognition process. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 This is a structural diagram of an encrypted CPU card reader according to an exemplary embodiment of the present invention;

[0033] Figure 2 This is a functional composition diagram of a control processing unit in an encrypted CPU card reader described in an exemplary embodiment of the present utility model.

[0034] Figure 3 This is a specific workflow diagram of an encrypted CPU card reader described in an exemplary embodiment of the present utility model. DETAILED DESCRIPTION

[0035] The utility model relates to an encrypted CPU card reader, comprising: (1) a control processing unit, which is the core processing center of the encrypted CPU card reader, and completes the input and output control, card reading and verification operations of the card reader, and has the functions of record management, authority management, alarm and data encryption, wherein the control processing unit includes an MCU module, a signal input module, an anti-disassembly module, a Wiegand output module, a sound and light control module, a PSAM card reading and writing module and a radio frequency circuit module; wherein the MCU module controls the entire operation logic of the card reader, and its internal Flash stores program code and configuration information, the signal input module mainly has Wiegand format input and keyboard data input, the anti-disassembly module uses a photosensitive sensor, and outputs an anti-disassembly signal when the password module of the card reader is disassembled, and the Wiegand output module outputs an anti-disassembly signal when the card reader password module is disassembled. After the card reader successfully reads the card, it sends the card data. The sound and light control module is used for input and output control of sound and light signals such as red light, green light, and buzzer. The PSAM card reading and writing module is used to connect the MCU module and the PSAM card to perform data communication and complete the card reading process. The radio frequency circuit module radiates 13.56M radio frequency to power the radio frequency card (CPU card) and sends data through the 13.56M carrier and receives data returned by the radio frequency card to complete the card reading process; and (2) a structural shell, which is an installation platform for the control processing unit and has dustproof, shockproof, waterproof and other properties to adapt to use under various environmental conditions and facilitate the overall installation of the card reader in various installation environments. The structural shell includes a shell and a cover plate, the control processing unit is installed on the shell, and the keyboard is installed on the cover plate. The utility model is a card reading device used in access control systems and attendance systems, which is used to read the information of the CPU card encrypted by the algorithm, and uses the algorithm to encrypt and decrypt to ensure the security of the CPU card information.

[0036] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0037] The embodiment of the present invention is an encrypted CPU card reader, such as Figure 1 As shown in a, b and c, wherein a is the base shell (201) of the structural shell (2) of the encryption CPU card reader of the present invention, b is the cover (202) of the structural shell (2) of the encryption CPU card reader, and c is the left view of the cover (202) of the structural shell (2). Specifically, the encryption CPU card reader of the present invention includes:

[0038] The control processing unit (1) is the core processing center of the encrypted CPU card reader, which completes the input and output control, card reading and verification operations of the card reader, and has functions such as record management, authority management, alarm and data encryption;

[0039] The structural housing (2) includes a housing (201) and a cover plate (202). The control processing unit is mounted on the housing, and the keyboard is mounted on the cover plate (202). The structural housing (2) is a mounting platform for the control processing unit and has dustproof, shockproof, and waterproof properties to adapt to use in various environmental conditions and facilitate the overall installation of the card reader in various installation environments.

[0040] The LED indicator is used to intuitively display the working status of the card reader. It uses different colors and flashing patterns to represent different states, specifically: red light on when powered on, yellow light on when self-testing, yellow light flashing quickly when password entry is required, red light flashing once per second when prompting to swipe the configuration card, and yellow light on once when the card is successfully swiped;

[0041] Buzzer: It will emit different prompt sounds according to the different status of the card reader, specifically: one long beep if the card reader is successfully configured, two short beeps if the configuration is not completed within 30 seconds and the card reader is exited, a long beep if the card reader firmware integrity check fails, and four short beeps if the password entered twice in password supervisor status is inconsistent.

[0042] The control processing unit (1) is installed in the shell (201) in the structural shell (2). After screws are passed through the mounting holes (203) on the left and right sides of the shell (201), the shell (201) (after the control processing unit 1 is installed) can be installed on a corresponding installation environment (which can be a wall, a column, etc.). Then, the cover (202) in the structural shell (2) is closed, and the structural shell (2) is tightened with screws through the bottom mounting holes (204). The entire device is installed.

[0043] Among them, the shell material: PC+ABS is selected. Such materials make the card reader not only feel better, but also more durable and aging-resistant. The indicator light and buzzer are designed as follows: the card reader is equipped with an LED indicator light to intuitively display the working status of the card reader. The indicator light uses different colors and flashing modes to represent different states, such as the red light is on when the power is on, the yellow light is always on when the self-test is performed, the yellow light flashes quickly when the password is required to enter, the red light flashes once per second when the configuration card is prompted, and the yellow light is on once when the card is successfully swiped, etc. The buzzer will emit different prompt sounds according to the different states of the card reader, such as a long beep when the card reader is successfully configured, two short beeps when the card reader is not configured within 30 seconds and exits, a long beep when the card reader firmware integrity check fails, and four short beeps when the password entered twice in the password supervisor state is inconsistent, etc. As for the sound setting of the buzzer, the long beep and the short beep are 2. The order of the long beep and the four beeps corresponding to the different states can be interchanged arbitrarily. For example, when the card reader is configured successfully, two short beeps, a long beep, or four short beeps can be heard. When the card reader is not configured and exited within 30 seconds, one long beep, a long beep, or four short beeps can be heard. When the card reader firmware integrity check fails, one long beep, four short beeps, or two short beeps can be heard. When the password is entered inconsistently for more than three times in the password supervisor state, one long beep, a long beep, or two short beeps can be heard.

[0044] The card reader's design resembles the nine rows of door nails found on a gate. A vertical LED indicator light is located directly above the card reader, flanked by neatly arranged dots. Each key press illuminates and beeps to indicate whether the key has been pressed. These features enhance the card reader's aesthetics and practicality while also providing a superior user experience.

[0045] Among them, such as Figure 2 As shown, the control processing unit (1) includes:

[0046] The MCU module (101) controls the entire operating logic of the card reader, and its internal Flash stores program code and configuration information. It uses a high-performance MCU chip from Siliconlabs and supports chip upgrades and replacements.

[0047] The signal input module (102) mainly includes Wiegand format input and keyboard data input, and all input signals are output to the MCU module (101);

[0048] The anti-disassembly module (103) uses a photosensor and outputs an anti-disassembly signal to the MCU module (101) when the card reader password module is disassembled;

[0049] The Wiegand output module (104) sends the card data to the background processing system after the card reader successfully reads the card;

[0050] The sound and light control module (105) is used for input and output control of sound and light signals such as a red light, a green light, and a buzzer. When the sound and light control module (105) receives a red light or a green light input control signal, it outputs a signal to light up an LED light of a corresponding color. When the sound and light control module (105) receives a buzzer input control signal or receives a card reading success instruction sent by the MCU module (101), it outputs a signal to control the buzzer to emit a sound and controls the response time to be 100ms.

[0051] The PSAM card reading and writing module (106) is used to connect the MCU module and the PSAM card to perform data communication and complete the card reading process; it is composed of a PSAM card control circuit and a PSAM card slot, and the card slot is used to install a PSAM card that supports the algorithm.

[0052] The radio frequency circuit module (107) uses the radio frequency chip of Fudan Microelectronics Company to design the module circuit, which radiates 13.56M radio frequency to power the radio frequency card (CPU card, which has a commercial cryptographic algorithm compiled by the State Cryptography Administration built in it), and sends data through the 13.56M carrier and receives data returned by the radio frequency card to complete the card reading process.

[0053] Among them, such as Figure 3 As shown, the specific working process of the encrypted CPU card reader is as follows:

[0054] The encrypted CPU card reader is powered on, and a reset instruction is sent to the PSAM card reading and writing module (106) through the MCU module (101) in the control processing unit (1). The PSAM card reading and writing module (106) executes the instruction after receiving it, and feeds back a reset response message to the MCU module (101), indicating that the PSAM card is reset successfully, and the encrypted CPU card reader starts normally;

[0055] After the encrypted CPU card reader is started normally, the MCU module (101) sends a door access control application selection instruction to the PSAM card reader (106). The PSAM card reader (106) executes the instruction after receiving the instruction and feeds back a door access control application selection response message to the MCU module (101), indicating that the PSAM card is working normally and the encrypted CPU card reader has completed startup and can start card reading;

[0056] The encrypted CPU card reader searches for a card, and after finding the CPU card (user card) through the radio frequency circuit module (107), the MCU module (101) in the control processing unit (1) sends a reset instruction to the user card through the radio frequency circuit module (107). The user card executes the instruction after receiving it, and feeds back a reset response message to the radio frequency circuit module (107). After receiving the reset response signal, the radio frequency circuit module (107) feeds back a reset response message to the MCU module (101), indicating that the user card is successfully reset and can be used.

[0057] After the encrypted CPU card reader finds the card and resets normally, it sends an access control application selection instruction to the user card through the radio frequency circuit module (107). After receiving the instruction, the user card executes it and feeds back an access control application selection response message to the MCU module (101) through the radio frequency circuit module (107), indicating that the user card is working normally.

[0058] The encrypted CPU card reader first performs external authentication: the MCU module (101) in the control processing unit (1) sends a random number acquisition instruction to the user card through the radio frequency circuit module (107); after receiving the instruction, the user card returns a random number RND1 and feeds it back to the MCU module (101) through the radio frequency circuit module (107); the MCU module (101) sends an encryption calculation initialization instruction to the PSAM card through the PSAM card reading module (106) (the user card encrypts RND1 by itself to obtain RND1B); after receiving the instruction, the PSAM card returns an encryption calculation initialization response message to the MCU module (101) through the PSAM card reading module (106), indicating that the encrypted calculation initialization response message is received. The PSAM card can work normally; the MCU module (101) sends an encrypted random number RND1 instruction to the PSAM card through the PSAM card reading module (106); after receiving the instruction, the PSAM card returns an encrypted result RND1A message to the MCU module (101) through the PSAM card reading module (106); the MCU module (101) in the control processing unit (1) sends an external authentication instruction (including RND1A) to the user card through the radio frequency circuit module (107); after receiving the external authentication result, the user card returns the external authentication result (the user card system compares RND1A and RND1B), and feeds it back to the MCU module (101) through the radio frequency circuit module (107);

[0059] The encrypted CPU card reader then performs internal authentication: the MCU module (101) sends a random number acquisition instruction to the PSAM card through the PSAM card reading module (106), and the PSAM card returns a random number RND2 message to the MCU module 101 through the PSAM card reading module (106) after receiving the instruction; the MCU module (101) sends an internal authentication instruction to the user card through the radio frequency circuit module (107), and the user card returns a random number encryption result RND2B after receiving the instruction, and feeds back the result to the MCU module (101) through the radio frequency circuit module (107); the MCU module (101) sends an internal authentication instruction (including the random number RND2) to the PSAM card through the PSAM card reading module (106), and the PSAM card returns a random number encryption result RND2A message to the MCU module (101) after receiving the instruction; the MCU module (101) compares RND2A and RND2B, and if they are the same, the authentication is successful;

[0060] After the encrypted CPU card reader authentication is completed, the MCU module (101) in the control processing unit (1) sends a user information file acquisition instruction to the user card through the radio frequency circuit module (107). After receiving the instruction, the user card returns the user information file data DAT. If DAT is ciphertext, it is decrypted;

[0061] Then, the encryption CPU card reader performs user file decryption, the MCU module (101) in the control processing unit (1) sends an encryption calculation initialization instruction to the PSAM card through the PSAM card reading module (106), and after receiving the instruction, the PSAM card returns an encryption calculation initialization response message to the MCU module (101) through the PSAM card reading module (106), indicating that the decryption work can start; the MCU module (101) sends user data DAT that needs to be decrypted to the PSAM card through the PSAM card reading module (106), and the PSAM card decrypts after receiving the DAT, and then returns the plaintext user data to the MCU module (101) through the PSAM card reading module (106);

[0062] Then, the encrypted CPU card reader sends the user data, and the MCU module (101) in the control processing unit (1) transmits the user data to the access controller via the Wiegand output module (104). In this way, the encrypted CPU card reader of the utility model realizes access control management, protects the privacy of the user, and has the function of preventing the card reader itself and the data of the CPU card from being eavesdropped or tampered during the identity recognition process, thereby improving the security and efficiency of access control management.

[0063] The above are specific implementation methods of the present invention. Various changes and substitutions can be made to the present invention without violating the spirit and principles of the present invention. These changes and substitutions are all within the scope of protection of the present invention.

Claims

1. An encrypted CPU card reader, characterized in that: The card reader comprises: The control processing unit is the core processing center of the encrypted CPU card reader, which completes the input and output control, card reading and verification operations of the card reader, and has record management, authority management, alarm and data encryption functions; A structural housing, which is a mounting platform for the control and processing unit to adapt to use and overall installation; An LED indicator light, which is used to display the working status of the card reader, and which uses different colors and / or flashing patterns to indicate different states; and Buzzer: It will emit different prompt sounds according to the different states of the card reader; The control processing unit includes an MCU module, a signal input module, an anti-tamper module, a Wiegand output module, a sound and light control module, a PSAM card reading and writing module, and a radio frequency circuit module: The signal input module includes Wiegand format input and keyboard data input; The anti-tamper module includes a photosensor for outputting an anti-tamper signal when the card reader password module is removed; The Wiegand output module sends card data after the card reader successfully reads the card; The sound and light control module is used for input and output control of red light, green light, and buzzer sound and light signals; Described PSAM card reading and writing module, it is used for connecting MCU module and PSAM card, carries out data communication, completes card reading process; The radio frequency circuit module radiates radio frequency outwards to power the CPU card, sends data through a carrier wave and receives data returned by the radio frequency card to complete the card reading process.

2. The encrypted CPU card reader according to claim 1, wherein: The LED indicator light displays as follows: the red light is on when power is turned on, the yellow light is always on when self-testing, the yellow light flashes quickly when password input is required, the red light flashes once per second when prompting to swipe the configuration card, and the yellow light is on once when the card is swiped successfully.

3. The encrypted CPU card reader according to claim 1, wherein: The buzzer will beep once long when the card reader is successfully configured, beep twice shortly if the card reader fails to be configured within 30 seconds and exits, beep once long if the card reader firmware integrity check fails, or beep four shortly if the password entered in the password supervisor state is inconsistent for 2 or more times.

4. The encrypted CPU card reader according to claim 2, wherein: The outwardly radiated radio frequency is an outwardly radiated 13.56M radio frequency, and the carrier is a 13.56M carrier.

5. The encrypted CPU card reader according to any one of claims 1 to 4, characterized in that: The structural shell includes a shell and a cover plate, The housing is used to install the control processing unit and can be fixed on a corresponding installation environment; The cover plate is used for installing the keyboard and is connected and assembled with the shell so that the encryption CPU card reader is an integral whole.

6. The encrypted CPU card reader according to any one of claims 1 to 4, characterized in that: A vertical LED indicator light and orderly arranged dots on both sides are designed directly above the card reader.

7. The encrypted CPU card reader according to any one of claims 1 to 4, characterized in that: The encrypted CPU card reader searches for the card, and after finding the CPU card, selects the DF file directory that needs to be read.

Images